RSA Registration Manager 6.7
Microsoft Windows Server 2003 SP2
Cisco Pix Firewall
Checkpoint firewall
firewall changed from Cisco Pix to Checkpoint and we have been seeing a lot of slowness when loading up the RA Administration pages
The RM pages are extremely slow to load the first time. Firewall seeing packet out of sync errors. The pages are loading normally (10-20 seconds) after the first login. If the application is logging then there is no delay... however after an extended period of time, say over night the pages are extremely slow to load.
Example
*******************************************
Information: TCP packet out of state: First packet isn't SYN
tcp_flags: PUSH-ACK
SmartDefense Profile: Default_Protection
Information: TCP packet out of state: First packet isn't SYN
tcp_flags: PUSH-ACK
SmartDefense Profile: Default_Protection
Timeout set in xudad.conf:
XUDATIMEOUT 305
firewall timeout set at 1 hour and ports (t17636 and t18636) are set to 5 hours.
disabled the time out at the firewall i.e. made it to time out at 24 hrs and have observed that the slowness is not there.
Related Articles
Alerting Issue in UI in RSA Web Threat Detection 5.1.0.7 Custom Key 7Number of Views AFX connector payload has “attribute_sync_” prefixed in RSA Identity Governance and Lifecycle 22Number of Views RSA Authentication Manager 8.1 Performance and Scalability Guide 10Number of Views Restore database script does not load the data 36Number of Views Users deleted from Cloud Admin console are not resynchronized in the next sync for RSA SecurID Access 46Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide